Domain > coverage-terrorists.click

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-26	104.21.4.220 (ClassC)

HTTP/1.1 200 OKDate: Fri, 26 Sep 2025 01:55:26 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Cache-Control: no-cache, no-store, must-revalidateReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?spQO8nPWpxunUwiU3PuYB8WopzATyygjP35lC1Kts2A1mn4Z6D5ELtXC%2FePhRopN46zKk3OchSxZCqguhoSKTnzWy6rkGlMAi3FpKLaayAxMgcaFB5u%2B2}}Expires: Fri, 26 Sep 2025 01:55:26 GMTVary: Accept-EncodingAccess-Control-Allow-Origin: *cf-cache-status: DYNAMICSet-Cookie: _subidfofmf56cm0ot; Path/; ExpiresMon, 27 Oct 2025 01:55:26 GMTSet-Cookie: f5771eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjExMzU5NVwiOjE3NTg4NTE3MjZ9LFwiY2FtcGFpZ25zXCI6e1wiNjA2OThcIjoxNzU4ODUxNzI2fSxcInRpbWVcIjoxNzU4ODUxNzI2fSJ9.V4zh8YvbQ6P-2dmWuuu07lrn3VJgieTVRuvh6lOvhAc; Path/; ExpiresSat, 27 Sep 2025 01:55:26 GMTSet-Cookie: _tokenuuid_fofmf56cm0ot_fofmf56cm0ot68d5f28e5060b4.93294681; Path/; ExpiresMon, 27 Oct 2025 01:55:26 GMTCF-RAY: 984f23958ecafefe-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>head>base href/lander/3930-am-18--premium-dark/index.html>  !-- Facebook Pixel Code -->script>  !function(f,b,e,v,n,t,s)  {if(f.fbq)return;nf.fbqfunction(){n.callMethod?  n.callMethod.apply(n,arguments):n.queue.push(arguments)};  if(!f._fbq)f._fbqn;n.pushn;n.loaded!0;n.version2.0;  n.queue;tb.createElement(e);t.async!0;  t.srcv;sb.getElementsByTagName(e)0;  s.parentNode.insertBefore(t,s)}(window, document,script,  https://connect.facebook.net/en_US/fbevents.js);  fbq(init, 663549359614802);  fbq(track, PageView);/script>noscript>img height1 width1 styledisplay:none srchttps://www.facebook.com/tr?id663549359614802&evPageView&noscript1 />/noscript>!-- End Facebook Pixel Code -->!-- TikTok Pixel Code Start -->script>!function (w, d, t) { w.TiktokAnalyticsObjectt;var ttqwtwt||;ttq.methodspage,track,identify,instances,debug,on,off,once,ready,alias,group,enableCookie,disableCookie,ttq.setAndDeferfunction(t,e){tefunction(){t.push(e.concat(Array.prototype.slice.call(arguments,0)))}};for(var i0;ittq.methods.length;i++)ttq.setAndDefer(ttq,ttq.methodsi);ttq.instancefunction(t){for(var ettq._it||,n0;nttq.methods.length;n++)ttq.setAndDefer(e,ttq.methodsn);return e},ttq.loadfunction(e,n){var ihttps://analytics.tiktok.com/i18n/pixel/events.js;ttq._ittq._i||{},ttq._ie,ttq._ie._ui,ttq._tttq._t||{},ttq._te+new Date,ttq._ottq._o||{},ttq._oen||{};var odocument.createElement(script);o.typetext/javascript,o.async!0,o.srci+?sdkid+e+&lib+t;var adocument.getElementsByTagName(script)0;a.parentNode.insertBefore(o,a)}; ttq.load(pixel); ttq.page();}(window, document, ttq);/script>!-- TikTok Pixel Code End -->    meta charsetUTF-8>  meta nameviewport contentwidthdevice-width, initial-scale1.0>  link relstylesheet typetext/css hrefstyle.css>  link hrefhttps://fonts.googleapis.com/css2?familyMaterial+Symbols+Outlined relstylesheet />  title>Դուք ավելի քան 21 տարեկան եք:/title>/head>body>  video preloadauto no-controls autoplay playsinline muted loop idmyVideo>		source src1.mp4 typevideo/mp4 posterposter.jpeg>	/video>div classcontent_1>  div classcontent_2>  h1 style padding-bottom: 20px;>Դուք ավելի քան 21 տարեկան եք:/h1>  a classbutton_1 hrefhttps://coverage-terrorists.click/?_lp1&_tokenuuid_fofmf56cm0ot_fofmf56cm0ot68d5f28e5060b4.93294681>Ոչ/a>  a classbutton_2 hrefhttps://coverage-terrorists.click/?_lp1&_tokenuuid_fofmf56cm0ot_fofmf56cm0ot68d5f28e5060b4.93294681>Այո/a>    /div>  /div>    script>      document.addEventListener(DOMContentLoaded, function() {        function getCookie(name) {            let nameEQ  name + ;            let ca  document.cookie.split(;);            for(let i0; i  ca.length; i++) {              let c  cai;              while (c.charAt(0)   ) c  c.substring(1,c.length);              if (c.indexOf(nameEQ)  0) return c.substring(nameEQ.length, c.length);            }            return null;        }                function updateParams(subid, fbc, fbp) {            if (subid && fbc && fbp) {                try {                    const response  fetch(`https%3A%2F%2Fcoverage-terrorists.click/?_update_tokens1&sub_id${encodeURIComponent(subid)}&sub_id_15${encodeURIComponent(fbc)}&sub_id_16${encodeURIComponent(fbp)}`)                    console.log(response);                } catch (error) {                    console.error(Error fetching data:, error);                }            }        }                function sendToKeitaro(){          const fbc  getCookie(_fbc);          const fbp  getCookie(_fbp);          console.log(fbc);          console.log(fbp);          const subid  fofmf56cm0ot;          updateParams(subid, fbc, fbp);        }                setTimeout(sendToKeitaro, 1500);      });  /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > coverage-terrorists.click

Is this malicious?

DNS Resolutions

Port 443